Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf

doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf


Plagegeister aller Art und deren Bekämpfung: doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 2 von 2 1 2
Alt 05.05.2014, 13:50   #1
M-K-D-B
/// TB-Ausbilder
 
doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf - Standard

doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf


Servus,



Achtung!
Der OTL-Fix ist sehr umfangreich!
Vergewissere dich, dass du alles aus der Code-Box auch bei dir einfügst, bevor du auf "Fix" drückst!





Schritt 1
  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.
Code:
ATTFilter
:files
C:\Windows\system32\UpdSvc.dll

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Joosoft.com]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Joosoft.com]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
"Update-Service-Installer-Service"=-
"Update-Service"=-


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache]
"DisplayName"="@%SystemRoot%\\System32\\dnsapi.dll,-101"
"Group"="TDI"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,53,00,65,00,72,00,76,\
  00,69,00,63,00,65,00,00,00
"Description"="@%SystemRoot%\\System32\\dnsapi.dll,-102"
"ObjectName"="NT AUTHORITY\\NetworkService"
"ErrorControl"=dword:00000001
"Start"=dword:00000002
"Type"=dword:00000020
"DependOnService"=hex(7):54,00,64,00,78,00,00,00,6e,00,73,00,69,00,00,00,00,00
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\
  00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\
  67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,47,00,6c,\
  00,6f,00,62,00,61,00,6c,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,\
  65,00,00,00,00,00
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  64,00,6e,00,73,00,72,00,73,00,6c,00,76,00,72,00,2e,00,64,00,6c,00,6c,00,00,\
  00
"ServiceDllUnloadOnStop"=dword:00000001
"extension"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,\
  00,6e,00,73,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Parameters\DnsCache]
"ShutdownOnIdle"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Security]
"Security"=hex:01,00,14,80,f8,00,00,00,04,01,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,c8,00,08,00,00,00,00,02,18,00,9d,01,02,00,01,02,00,00,00,00,00,\
  05,20,00,00,00,21,02,00,00,00,02,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\
  20,00,00,00,20,02,00,00,00,02,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,\
  00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,02,\
  14,00,8d,00,02,00,01,01,00,00,00,00,00,05,14,00,00,00,00,02,14,00,8d,00,02,\
  00,01,01,00,00,00,00,00,05,13,00,00,00,00,02,18,00,cd,00,02,00,01,02,00,00,\
  00,00,00,05,20,00,00,00,2c,02,00,00,00,02,28,00,cd,01,02,00,01,06,00,00,00,\
  00,00,05,50,00,00,00,04,c9,44,af,94,d9,d3,e5,2b,e1,b7,1c,17,84,87,13,6e,1a,\
  fa,65,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,\
  00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\TriggerInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\TriggerInfo\0]
"Type"=dword:00000004
"Action"=dword:00000001
"GUID"=hex:07,9e,56,b7,21,84,e0,4e,ad,10,86,91,5a,fd,ad,09
"Data0"=hex:35,00,33,00,35,00,35,00,00,00,55,00,44,00,50,00,00,00,00,00
"DataType0"=dword:00000002


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation]
"DisplayName"="@%systemroot%\\system32\\wkssvc.dll,-100"
"Group"="NetworkProvider"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,53,00,65,00,72,00,76,\
  00,69,00,63,00,65,00,00,00
"Description"="@%systemroot%\\system32\\wkssvc.dll,-101"
"ObjectName"="NT AUTHORITY\\NetworkService"
"ErrorControl"=dword:00000001
"Start"=dword:00000002
"Type"=dword:00000020
"DependOnService"=hex(7):42,00,6f,00,77,00,73,00,65,00,72,00,00,00,4d,00,52,00,\
  78,00,53,00,6d,00,62,00,31,00,30,00,00,00,4d,00,52,00,78,00,53,00,6d,00,62,\
  00,32,00,30,00,00,00,4e,00,53,00,49,00,00,00,00,00
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\
  00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\
  67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,\
  00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\
  00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,\
  00,6c,00,65,00,67,00,65,00,00,00,00,00
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,01,00,00,00,60,ea,00,00,01,00,00,00,c0,d4,01,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage]
"Bind"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,\
  00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,38,00,32,00,30,00,39,00,\
  38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,\
  00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,\
  44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,\
  00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,\
  70,00,36,00,5f,00,7b,00,37,00,46,00,30,00,37,00,35,00,37,00,39,00,35,00,2d,\
  00,30,00,33,00,37,00,32,00,2d,00,34,00,42,00,41,00,41,00,2d,00,42,00,36,00,\
  30,00,43,00,2d,00,34,00,36,00,41,00,31,00,37,00,41,00,34,00,31,00,41,00,39,\
  00,44,00,33,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\
  53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,\
  00,35,00,39,00,45,00,41,00,44,00,33,00,38,00,2d,00,45,00,44,00,36,00,31,00,\
  2d,00,34,00,35,00,30,00,33,00,2d,00,38,00,33,00,44,00,34,00,2d,00,34,00,43,\
  00,37,00,35,00,42,00,36,00,37,00,42,00,41,00,32,00,39,00,43,00,7d,00,00,00,\
  5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,\
  00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,38,00,32,00,30,00,39,00,38,00,\
  43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,\
  00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,\
  42,00,42,00,36,00,37,00,34,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,\
  00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,38,00,32,00,\
  30,00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,\
  00,43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,\
  45,00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,00,00,5c,00,44,\
  00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,\
  5f,00,7b,00,37,00,46,00,30,00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,33,\
  00,37,00,32,00,2d,00,34,00,42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,00,\
  2d,00,34,00,36,00,41,00,31,00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,33,\
  00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,\
  70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,35,00,39,00,45,00,41,00,44,00,33,\
  00,38,00,2d,00,45,00,44,00,36,00,31,00,2d,00,34,00,35,00,30,00,33,00,2d,00,\
  38,00,33,00,44,00,34,00,2d,00,34,00,43,00,37,00,35,00,42,00,36,00,37,00,42,\
  00,41,00,32,00,39,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
  65,00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,38,00,32,00,30,\
  00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,\
  43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,\
  00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,00,00,5c,00,44,00,\
  65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,\
  00,53,00,6d,00,62,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\
  4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,\
  00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,\
  33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,\
  00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,\
  00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,\
  00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,37,00,46,00,\
  30,00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,33,00,37,00,32,00,2d,00,34,\
  00,42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,00,2d,00,34,00,36,00,41,00,\
  31,00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,33,00,7d,00,00,00,5c,00,44,\
  00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,\
  54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,35,00,39,00,45,00,41,\
  00,44,00,33,00,38,00,2d,00,45,00,44,00,36,00,31,00,2d,00,34,00,35,00,30,00,\
  33,00,2d,00,38,00,33,00,44,00,34,00,2d,00,34,00,43,00,37,00,35,00,42,00,36,\
  00,37,00,42,00,41,00,32,00,39,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\
  69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,\
  00,69,00,70,00,36,00,5f,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,\
  32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,\
  00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,\
  36,00,37,00,34,00,46,00,7d,00,00,00,00,00
"Route"=hex(7):22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,\
  00,70,00,22,00,20,00,22,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,\
  32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,\
  00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,\
  36,00,37,00,34,00,46,00,7d,00,22,00,00,00,22,00,53,00,6d,00,62,00,22,00,20,\
  00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,37,00,\
  46,00,30,00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,33,00,37,00,32,00,2d,\
  00,34,00,42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,00,2d,00,34,00,36,00,\
  41,00,31,00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,33,00,7d,00,22,00,00,\
  00,22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,\
  36,00,22,00,20,00,22,00,7b,00,31,00,35,00,39,00,45,00,41,00,44,00,33,00,38,\
  00,2d,00,45,00,44,00,36,00,31,00,2d,00,34,00,35,00,30,00,33,00,2d,00,38,00,\
  33,00,44,00,34,00,2d,00,34,00,43,00,37,00,35,00,42,00,36,00,37,00,42,00,41,\
  00,32,00,39,00,43,00,7d,00,22,00,00,00,22,00,53,00,6d,00,62,00,22,00,20,00,\
  22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,38,00,32,\
  00,30,00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,\
  34,00,43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,\
  00,45,00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,22,00,00,00,\
  22,00,54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,38,00,32,00,30,\
  00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,\
  43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,\
  00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,22,00,00,00,22,00,\
  54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,37,00,46,00,30,\
  00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,33,00,37,00,32,00,2d,00,34,00,\
  42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,00,2d,00,34,00,36,00,41,00,31,\
  00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,33,00,7d,00,22,00,00,00,22,00,\
  54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,31,00,35,00,39,\
  00,45,00,41,00,44,00,33,00,38,00,2d,00,45,00,44,00,36,00,31,00,2d,00,34,00,\
  35,00,30,00,33,00,2d,00,38,00,33,00,44,00,34,00,2d,00,34,00,43,00,37,00,35,\
  00,42,00,36,00,37,00,42,00,41,00,32,00,39,00,43,00,7d,00,22,00,00,00,22,00,\
  54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,38,00,32,00,30,\
  00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,\
  43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,\
  00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,22,00,00,00,22,00,\
  4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,53,00,6d,00,62,00,22,00,00,00,22,\
  00,4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,\
  70,00,22,00,20,00,22,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,\
  00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,\
  42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,\
  00,37,00,34,00,46,00,7d,00,22,00,00,00,22,00,4e,00,65,00,74,00,42,00,54,00,\
  22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,\
  00,37,00,46,00,30,00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,33,00,37,00,\
  32,00,2d,00,34,00,42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,00,2d,00,34,\
  00,36,00,41,00,31,00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,33,00,7d,00,\
  22,00,00,00,22,00,4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,\
  00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,31,00,35,00,39,00,45,00,\
  41,00,44,00,33,00,38,00,2d,00,45,00,44,00,36,00,31,00,2d,00,34,00,35,00,30,\
  00,33,00,2d,00,38,00,33,00,44,00,34,00,2d,00,34,00,43,00,37,00,35,00,42,00,\
  36,00,37,00,42,00,41,00,32,00,39,00,43,00,7d,00,22,00,00,00,22,00,4e,00,65,\
  00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,\
  22,00,20,00,22,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,2d,\
  00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,00,\
  41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,37,\
  00,34,00,46,00,7d,00,22,00,00,00,00,00
"Export"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\
  00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,\
  6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,\
  00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,\
  45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,\
  00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,\
  7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\
  00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,\
  6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,\
  00,5f,00,7b,00,37,00,46,00,30,00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,\
  33,00,37,00,32,00,2d,00,34,00,42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,\
  00,2d,00,34,00,36,00,41,00,31,00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,\
  33,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,\
  00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,\
  69,00,6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,\
  00,36,00,5f,00,7b,00,31,00,35,00,39,00,45,00,41,00,44,00,33,00,38,00,2d,00,\
  45,00,44,00,36,00,31,00,2d,00,34,00,35,00,30,00,33,00,2d,00,38,00,33,00,44,\
  00,34,00,2d,00,34,00,43,00,37,00,35,00,42,00,36,00,37,00,42,00,41,00,32,00,\
  39,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,\
  00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,\
  74,00,69,00,6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,\
  00,70,00,36,00,5f,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,\
  2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,\
  00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,\
  37,00,34,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,\
  00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,\
  61,00,74,00,69,00,6f,00,6e,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,\
  00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,00,45,00,\
  33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,2d,00,33,\
  00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,00,7d,00,\
  00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,\
  00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,\
  6e,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,37,00,46,00,30,\
  00,37,00,35,00,37,00,39,00,35,00,2d,00,30,00,33,00,37,00,32,00,2d,00,34,00,\
  42,00,41,00,41,00,2d,00,42,00,36,00,30,00,43,00,2d,00,34,00,36,00,41,00,31,\
  00,37,00,41,00,34,00,31,00,41,00,39,00,44,00,33,00,7d,00,00,00,5c,00,44,00,\
  65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,\
  00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,54,00,\
  63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,35,00,39,00,45,00,41,00,44,\
  00,33,00,38,00,2d,00,45,00,44,00,36,00,31,00,2d,00,34,00,35,00,30,00,33,00,\
  2d,00,38,00,33,00,44,00,34,00,2d,00,34,00,43,00,37,00,35,00,42,00,36,00,37,\
  00,42,00,41,00,32,00,39,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,\
  63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,\
  00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,54,00,63,00,70,00,69,00,\
  70,00,36,00,5f,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,2d,\
  00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,00,\
  41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,37,\
  00,34,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\
  4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,\
  00,74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,\
  53,00,6d,00,62,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,\
  00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,\
  74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,\
  00,70,00,69,00,70,00,5f,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,\
  32,00,2d,00,39,00,35,00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,\
  00,42,00,41,00,37,00,2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,\
  36,00,37,00,34,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,\
  00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,\
  74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,\
  00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,37,00,46,00,30,00,37,00,\
  35,00,37,00,39,00,35,00,2d,00,30,00,33,00,37,00,32,00,2d,00,34,00,42,00,41,\
  00,41,00,2d,00,42,00,36,00,30,00,43,00,2d,00,34,00,36,00,41,00,31,00,37,00,\
  41,00,34,00,31,00,41,00,39,00,44,00,33,00,7d,00,00,00,5c,00,44,00,65,00,76,\
  00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,\
  72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,00,74,\
  00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,\
  35,00,39,00,45,00,41,00,44,00,33,00,38,00,2d,00,45,00,44,00,36,00,31,00,2d,\
  00,34,00,35,00,30,00,33,00,2d,00,38,00,33,00,44,00,34,00,2d,00,34,00,43,00,\
  37,00,35,00,42,00,36,00,37,00,42,00,41,00,32,00,39,00,43,00,7d,00,00,00,5c,\
  00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,\
  6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,\
  00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,\
  5f,00,7b,00,38,00,32,00,30,00,39,00,38,00,43,00,45,00,32,00,2d,00,39,00,35,\
  00,45,00,33,00,2d,00,34,00,43,00,37,00,36,00,2d,00,41,00,42,00,41,00,37,00,\
  2d,00,33,00,44,00,44,00,45,00,44,00,44,00,42,00,42,00,36,00,37,00,34,00,46,\
  00,7d,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\NetworkProvider]
"DeviceName"="\\Device\\LanmanRedirector"
"Name"="Microsoft Windows Network"
"DisplayName"=hex(2):40,00,25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,\
  00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\
  5c,00,77,00,6b,00,73,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,\
  00,31,00,30,00,32,00,00,00
"ProviderPath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  6e,00,74,00,6c,00,61,00,6e,00,6d,00,61,00,6e,00,2e,00,64,00,6c,00,6c,00,00,\
  00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  77,00,6b,00,73,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceDllUnloadOnStop"=dword:00000001
"EnablePlainTextPassword"=dword:00000000
"EnableSecuritySignature"=dword:00000001
"RequireSecuritySignature"=dword:00000000
"OtherDomains"=hex(7):00,00

:Commands
[reboot]
  • Schliesse bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<time_date>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread





Schritt 2
Starte FRST, setze einen Haken bei "Addition.txt" und drücke auf Scan.
Poste die beiden Logdateien.





Schritt 3
Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.







Bitte poste mit deiner nächsten Antwort
  • die Logdatei des OTL-Fix,
  • die Logdateien von FRST,
  • die Logdatei von FSS.
Antwort
Seite 2 von 2 1 2

Themen zu doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf
blau unterstrichen, blockieren, einfach, interpretieren, pup.optional.installiq, pup.optional.multiplug.a, pup.optional.youtubeadblocker.a, tauchen, versuch, versucht, werbeseite, werbeseiten


« 'TR/Dropper.Gen' [trojan] gefunden. Zugriff erlaubt ? | Win 8.1 Programm System.exe Arbeitsspeicher/Datenträgerüberlastung »


Ähnliche Themen: doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf


  1. Doppelt unterstrichene Wörter in Firefox
    Plagegeister aller Art und deren Bekämpfung - 01.12.2014 (12)
  2. Windows 8/Firefox: Popups/grüne, doppelt unterstichene Wörter/Ads by LyricsBuddy
    Log-Analyse und Auswertung - 21.09.2014 (13)
  3. grüne unterstrichene wörter mit werbung bei firefox
    Log-Analyse und Auswertung - 05.07.2014 (3)
  4. Grün unterstrichene Wörter auf jeder Webseite
    Plagegeister aller Art und deren Bekämpfung - 16.05.2014 (30)
  5. Windows 8; Werbe pop-ups und grüne doppelt unterstrichene Wörter in Texten
    Log-Analyse und Auswertung - 04.05.2014 (7)
  6. Doppelt grün unterstrichene Wörter mit Verlinkung
    Log-Analyse und Auswertung - 23.03.2014 (52)
  7. Doppelt unterstrichene Wörter mit Pop-ups
    Log-Analyse und Auswertung - 17.02.2014 (17)
  8. Firefox, doppelt unterstrichene grüne Werbelinks, popup-Werbefenster öffnen automatisch
    Log-Analyse und Auswertung - 22.01.2014 (15)
  9. Firefox, doppelt unterstrichene, grüne Textstellen, bei Mauszeigerkontakt Pop-up Werbung (schon wieder einer)
    Plagegeister aller Art und deren Bekämpfung - 21.01.2014 (12)
  10. Firefox, doppelt unterstrichene, grüne Textstellen, bei Mauszeigerkontakt Pop-up Werbung
    Log-Analyse und Auswertung - 18.01.2014 (5)
  11. Firefox, doppelt unterstrichene, grüne Textstellen, bei Mauszeigerkontakt Pop-up Werbung
    Plagegeister aller Art und deren Bekämpfung - 14.01.2014 (11)
  12. firefox, doppelt-unterstrichene grüne links mit popups
    Plagegeister aller Art und deren Bekämpfung - 14.01.2014 (1)
  13. grüne, doppelt-unterstrichene Wörter auf Webseiten öffnen Pop-up Fenster
    Plagegeister aller Art und deren Bekämpfung - 14.12.2013 (9)
  14. Werbeeinblendungen und grüne Texte bzw. Wörter doppelt unterstrichen
    Plagegeister aller Art und deren Bekämpfung - 06.12.2013 (1)
  15. Grüne Wörter doppelt unterstrichen auf Internetseiten
    Plagegeister aller Art und deren Bekämpfung - 26.11.2013 (17)
  16. Doppelt unterstrichene Wörter und Popups
    Log-Analyse und Auswertung - 17.11.2013 (2)
  17. Doppelt unterstrichene Wörter und Popups
    Log-Analyse und Auswertung - 26.10.2013 (13)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf - Servus, Achtung! Der OTL-Fix ist sehr umfangreich! Vergewissere dich, dass du alles aus der Code-Box auch bei dir einfügst, bevor du auf "Fix" drückst! Schritt 1 Starte bitte die OTL.exe - doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf...
Archiv
Du betrachtest: doppelt unterstrichene grüne Wörter tauchen wahlos auf jeder Seite auf auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132